Checkpoint 1500 Series Mode d’emploi

Models: V-80, V-80W, V-81, V-81W, V-81WL, V-81WD, V-81R, V-81WLR [Classification: Protected]

21 April2021

1500 APPLIANCE SERIES

R80.20.15

Centrally Managed

Administration Guide

Check Point Copyright Notice

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 2

Check Point Copyright Notice

under licensing restricting their use, copying, distribution, and decompilation. No part of this product or

related documentation may be reproduced in any form or by any means without prior written authorization

of Check Point. While every precaution has been taken in the preparation of this book, Check Point

assumes no responsibility for errors or omissions. This publication and features described herein are

subject to change without notice.

RESTRICTED RIGHTS LEGEND:

Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)

(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR

52.227-19.

TRADEMARKS:

Refer to the Copyright page for a list of our trademarks.

Refer to the Third Party copyright notices for a list of relevant copyrights and third-party licenses.

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 3

Important Information

Latest Software

We recommend that you install the most recent software release to stay up-to-date with the

latest functional improvements, stability fixes, security enhancements and protection

against new and evolving attacks.

Certifications

For third party independent certification of Check Point products, see the Check Point

Certifications page.

Check Point R80.20.15

For more about this release, see the R80.20.15 home page.

Latest Version of this Document in English

Open the latest version of this document in a Web browser.

Download the latest version of this document in PDF format.

Feedback

Check Point is engaged in a continuous effort to improve its documentation.

Please help us by sending your comments.

Revision History

Date Description

21 April 2021 Updated

"Configuring MAC Filtering" on page110

and

"SNMP" on page169

12 January 2021 Updated Allowed Password Characters

16 November 2020 Fixed link for homepage

18 October 2020 First release of this document

Table of Contents

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 4

Table of Contents

Check Point 1500 Appliance Series Overview

Setting up the Check Point Appliance

Connecting the Cables

Deployment Types

Predefining a Centrally Managed Deployment

Small-scale Deployment Installation

Defining a Gateway Object

Defining a Gateway Cluster Object

Workflow

Creating a Cluster for New Gateways

Converting an Existing Check Point Appliance to a Cluster

Viewing Cluster Status in the WebUI

Creating the Security Policy

Working with Security Zone Objects

Installing a Security Policy

Viewing the Policy Installation Status

Setting Server IP Address Behind a 3rd Party NAT Device

Large-scale Deployment Installation

Supported Security Management Versions

Large-scale Deployment Workflow

Defining a SmartLSM Gateway Profile for a Large-scale Deployment

Defining a SmartLSM Appliance Cluster Profile

Deploying with SmartProvisioning

Installing a Security Policy

Viewing the Policy Installation Status

SmartProvisioning

Creating a Gateway

General Properties

More Information

Communication Properties

Table of Contents

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 5

VPN Properties

Finish

Updating the Corporate Office Gateway

Creating a SmartLSM Appliance Cluster

General Properties

Cluster Properties

Cluster Names

More Information

Communication Properties

VPN Properties

Finish

Defining SmartLSM Gateways Using LSM CLI

Managing Device Settings

Configuring Firmware

Configuring RADIUS

Configuring Hotspot

Configuring a Configuration Script

Configuring a Provisioning Profile

First Time Deployment Options

Zero Touch Cloud Service

Deploying from a USB Drive or SD Card

Sample Configuration File

Preparing the Configuration Files

Deploying the Configuration File - Initial Configuration

Deploying the Configuration File - Existing Configuration

Viewing Configuration Logs

Troubleshooting Configuration Files

Configuration File Error

Suggested Workflow - Configuration File Error

Sample Configuration Log with Error

Using the set property Command

Appliance Configuration

The Home Tab

Table of Contents

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 6

Viewing System Information

Controlling and Monitoring Software Blades

Setting the Management Mode

Configuring Cloud Services

Managing Licenses

Viewing the Site Map

Managing Active Devices

Viewing Monitoring Data

Network

Troubleshooting

Viewing Reports

Using System Tools

Managing the Device

Configuring Internet Connectivity

Configuring the Internet Connectivity

The 'Configuration' tab

Creating a New Bond (WAN)

Configuring a USB Connection

Configuring an LTE Internet Connection (WiFi-LTE models only)

The 'Connection Monitoring' tab

The 'Advanced' tab

Monitoring

Configuring Wireless Network

Configuring the Local Network

Reserved IP Address for Specific MAC

Switch

Monitor Mode

Physical Interfaces

Bridge

VLANs

VPN Tunnel (VTI)

Virtual Access Point (VAP)

100

BOND

102

Table of Contents

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 7

Configuring a Hotspot

104

Configuring the Routing Table

107

Configuring MAC Filtering

110

Configuring the DNS Server

112

Configuring the Proxy Server

113

Backup, Restore, Upgrade, and Other System Operations

114

Using the Software Upgrade Wizard

116

Welcome

116

Upload Software

117

Upgrade Settings

117

Upgrading

117

Backing up the System

117

Configuring Local and Remote System Administrators

119

Configuring Administrator Access

125

Managing Device Details

127

Managing Date and Time

128

Configuring DDNS and Access Service

129

DDNS

129

Reach My Device

129

Remote Access to the WebUI

130

Remote Access to the CLI

130

Using System Tools

131

Managing Internal Certificates

132

Configuring High Availability

134

Advanced Settings

135

Managing Users and Objects

137

Working with User Awareness

137

Configuring Local Users and User Groups

138

Configuring Local and Remote System Administrators

140

Managing Authentication Servers

146

Managing Applications & URLs

147

Managing System Services

149

Managing Service Groups

151

Table of Contents

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 8

Managing Network Objects

152

Updatable Objects

154

Managing Network Object Groups

155

Logs and Monitoring

156

Viewing Security Logs

156

Viewing System Logs

158

Configuring External Log Servers

159

Secured Syslog

159

Managing Active Devices

161

Wireless Active Devices

162

Viewing VPN Tunnels

163

Viewing Active Connections

164

Access Points

165

Viewing Monitoring Data

166

Viewing Reports

167

Using System Tools

168

SNMP

169

SNMP Traps Receivers

170

SNMP Traps

170

SNMP Traps for VPNTunnels

170

SNMPTraps for Hardware Sensors

170

Advanced Configuration

172

Upgrade Using a USB Drive

172

Upgrade Using an SD Card

173

Boot Loader

174

Upgrade Using Boot Loader

175

Restoring Factory Defaults

176

Check Point 1500 Appliance Series Overview

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 9

Check Point 1500 Appliance Series

Overview

Check Point 1500 appliance series includes the 1530, 1550, 1570, 1590, and 1570R appliances. These

appliances support the Check Point Software Blade architecture and provide independent modular and

centrally managed security building blocks. You can quickly enable and configure the Software Blades to

meet your specific security needs.

Check Point 1530, 1550, 1570, 1590, and 1570R appliances deliver integrated unified threat management

to protect your organization from today's emerging threats. Based on proven Check Point security

technologies such as Stateful Inspection, Application Intelligence, and SMART (Security Management

Architecture), the appliances provides simplified deployment while delivering uncompromising levels of

security.

These appliances run an embedded version of the Gaia operating system. The appliances include core

configuration elements such as clish interface, SNMPv2/3 and routing stack implementations. In addition

to the Gaia features, Embedded Gaia contains support for built-in network switches, wireless networks, 4G

LTE Internet connectivity, multiple Internet connections (more than 2) in High Availability or Load Sharing

mode, Policy Based Routing, and DDNS support. Quick deployment with USB is supported for all

appliances, and with SD card and Dual SIM card for the 1570 / 1590 appliances. For more information, see

the 1500 appliance series product page.

This guide describes all aspects that apply to the Check Point 1530 / 1550 and 1570 / 1590 Appliances.

Note - Some topics only apply to specific appliances or models.

Appliance Model Appliance

Homepage

1530 / 1550 V-80 Wired, V-80W WiFi sk157412

1570 / 1590 V-81 Wired, V-81W WiFi, V-81WL WiFi-LTE, V-81WD WiFi-

DSL

sk157412

1570R V-81R, V-81WLR sk166654

For front, side, and back panel details for each appliance, see the relevant

Getting Started Guide

Review these materials before doing the procedures in this guide:

nR80.20.15 SMB Release Notes

nKnown Limitations

nResolved Issues

nGetting Started Guide

nSmall Business Security video channel

See the SMB R80.20.15 home page.

Setting up the Check Point Appliance

1500 Appliance Series R80.20.15 Centrally Managed Administration Guide | 10

Setting up the Check Point

Appliance

To set up the Check Point 1530 / 1550, 1570 / 1590 and 1570R Appliance:

1. Remove the Check Point Appliance from the shipping carton and place it on a tabletop.

2. Identity the network interface marked as LAN1.

This interface is preconfigured with the IP address 192.168.1.1.

Connecting the Cables

To connect the cables:

1. Connect the power cable to the appliance. The appliance is connected directly to the power source.

1530 / 1550 appliances only: Turn on the power switch located on the back panel.

2. When the appliance is turned on, the Power LED on the front panel lights up in red for a short period.

The LED then turns blue and starts to blink. This shows a boot is in progress and firmware is being

installed.

When the LED turns a solid blue, the appliance is ready for login.

Note – The LED is red if there is an alert or error.

nIf you use an external modem:

Connect the Ethernet cable to the WAN port on the appliance back panel and plug it into your

external modem or router's PC/LAN network port. The Internet LED on the appliance front

panel lights up when the Ethernet is connected.

nIf you do not use an external modem:

Connect the telephone cable to the DSL port on the appliance back panel and plug it into the

DSL line socket. The DSL LED as well as the Internet Link LED remains off until you configure

the appliance, including setting up the DSL as an internet connection.

3. Connect the standard network cable to the LAN1 port on the appliance and to the network adapter

on your PC.

Note - Wait 10 seconds between power cycles (off and on).

Autres manuels pour 1500 Series

Table des matières

Autres manuels Checkpoint Matériel réseau

Checkpoint

Checkpoint UTM-1 Edge W16 Manuel utilisateur

Checkpoint

Checkpoint 770 Manuel utilisateur

Checkpoint

Checkpoint 5000 Series Manuel utilisateur

Checkpoint

Checkpoint 4200 Manuel utilisateur

Checkpoint

Checkpoint 1570 Manuel utilisateur

Checkpoint

Checkpoint QUANTUM SMART-1 6000-L/6000-XL Manuel utilisateur

Checkpoint

Checkpoint NGX R66 Manuel utilisateur

Checkpoint

Checkpoint 21000 Appliances G-70 Manuel utilisateur

Checkpoint

Checkpoint 5000 Series Manuel utilisateur

Checkpoint

Checkpoint L-71 Mode d’emploi

Checkpoint

Checkpoint QUANTUM MAESTRO Manuel utilisateur

Checkpoint

Checkpoint 730 Manuel utilisateur

Checkpoint

Checkpoint IPS-1 Manuel utilisateur

Checkpoint

Checkpoint UTM-1 U-5 Manuel utilisateur

Checkpoint

Checkpoint MHO170 Manuel utilisateur

Checkpoint

Checkpoint Quantum SMART-1 600-M Manuel utilisateur

Checkpoint

Checkpoint QUANTUM SMART-1 Manuel utilisateur

Checkpoint

Checkpoint CPAC-Falcon-10G-B Mode d’emploi

Checkpoint

Checkpoint Smart-1 205 Manuel utilisateur

Checkpoint

Checkpoint 910 Manuel utilisateur

Checkpoint

Checkpoint Smart-1 5050 Mode d’emploi

Checkpoint

Checkpoint 12000 Manuel utilisateur

Checkpoint

Checkpoint 16000 Manuel utilisateur

Checkpoint

Checkpoint VPN-1 Edge X Series Manuel utilisateur

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur